← Back

CVE-2010-2836

nvd nist
Published: Sep 23, 2010Modified: Apr 29, 2026

JSON object

Loading...
7.8
Vector
AV:N/AC:L/Au:N/C:N/I:N/A:C
Exploitability: 10.0 / Impact: 6.9
Source: NVD

Description

Memory leak in the SSL VPN feature in Cisco IOS 12.4, 15.0, and 15.1, when HTTP port redirection is enabled, allows remote attackers to cause a denial of service (memory consumption) by improperly disconnecting SSL sessions, leading to connections that remain in the CLOSE-WAIT state, aka Bug ID CSCtg21685.

Affected (31)

Products: Cisco: Ios
Cisco
1 product
Ios
Configuration A
31 vulnerable
Vulnerable SoftwareAffected Versions
Cisco
Ios
Version 12.4
Ios
Version 12.4gc
Ios
Version 12.4mda
Ios
Version 12.4mr
Ios
Version 12.4mra
Ios
Version 12.4sw
Ios
Version 12.4xa
Ios
Version 12.4xb
Ios
Version 12.4xc
Ios
Version 12.4xd
Ios
Version 12.4xe
Ios
Version 12.4xf
Ios
Version 12.4xg
Ios
Version 12.4xj
Ios
Version 12.4xk
Ios
Version 12.4xl
Ios
Version 12.4xm
Ios
Version 12.4xn
Ios
Version 12.4xp
Ios
Version 12.4xt
Ios
Version 12.4xv
Ios
Version 12.4xw
Ios
Version 12.4xy
Ios
Version 12.4xz
Ios
Version 12.4ya
Ios
Version 12.4yb
Ios
Version 12.4yd
Ios
Version 15.0m
Ios
Version 15.0xa
Ios
Version 15.1(1)xb1
Ios
Version 15.1t

Related CWEs

CWE-399
CWE-399

References (2)

Source: psirt@cisco.com
PatchVendor Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
PatchVendor Advisory

Timeline

No history available yet.